usebruno / bruno

Opensource IDE For Exploring and Testing Api's (lightweight alternative to postman/insomnia)
https://www.usebruno.com/
MIT License
25.67k stars 1.17k forks source link

TLS on APT repos #2461

Open andy4261 opened 3 months ago

andy4261 commented 3 months ago

I have checked the following:

Describe the feature you want to add

I've only tried out Bruno a little bit, but I like what I see. I personally would use the APT repos so everything is kept up to date.

However your APT repos are only available over HTTP/an unencrypted correction. So I personally don't want to use them. Even though the packages are GnuPG signed, due to being an unencrypted connection APT could be exploited. For example see this recent exploit.

As such could you please create an HTTPS and/or Tor onion deb repo please?

This is quite important to me as I route all of my updates over Tor, so would want to avoid any possible zero day exploits against APT.

I looked in the issues nothing has been raised about this.

Thanks and keep up the hard work.

Mockups or Images of the feature

n/a